- Pulse Secure Community
- :
- About hutchingsp
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
01-13-2016
10-29-2017
hutchingsp
Contributor
24
Posts
1
Kudos
0
Solutions
10-26-2017
06:47:PM
I don't seem able to reply at the level of your reply :) These are static bookmarks. If it's just a case of it's not supported but is being developed (hopefully) we can live with that, I guess I just thought the HTML5 would work with exactly the same variables as the generic TS. Odd thing is if I look at the RDS box security logs it does seem to log a bad username/password event and appears to show the correct username in UPN format, but the bookmark is clearly passing the correct password as I can get in with the "Joe Bloggs" username format if that makes sense.
... View more
10-26-2017
02:10:PM
Thanks, thing is we want people to be able to use either ideally. So some people logon IVE as "joe bloggs" some sign on as "[email protected]" and either is passed through to HTML5. Odd that it works fine with the regular TS bookmarks?
... View more
10-26-2017
01:09:PM
I give up on how to escape things :) We're on 8.2R8.1 (build 57583) and this is what is in the resource bookmark and works using "Joe Bloggs" as the IVE logon name. https://imgur.com/a/wmSNg
... View more
10-25-2017
04:41:PM
USER enclosed in less than and greater than quotes - the forum is stripping it.
... View more
10-25-2017
04:40:PM
OK so it seems to be stripping off the piece where I said that I'm using "" as the username variable for both?!
... View more
10-25-2017
04:39:PM
I have an HTML5 RDP resource setup using as the username. I also have traditional TS resources setup using as the username. If I login to our PSA as "Joe Bloggs" both options work. If I login to our PSA as "[email protected]" i.e. using the users UPN name I can access the TS bookmark but not the HTML5 one, it refuses to authenticate and the security log on the RDS box shows an invalid username/password event for [email protected] If I login to the RDS box directly as [email protected] I can do so. Of course just to confirm the passwords are correct as this is all doing domain auth so I wouldn't get onto the PSA unless I were using correct domain creds :) Would anyone have any ideas before I open a ticket please?
... View more
12-16-2016
01:43:PM
I'm struggling to find a clear guide in the manual or online on how and whether it's possible to have Pulse Secure Client drop onto a particular VLAN based on either user role or a host checker policy. i.e. Fred goes on VLAN200 Tom goes on VLAN300 or MarketingPC goes on VLAN100 and FinancePC on VLAN400 We're on a recent 8.4.x branch of code and whilst I'm sure it's possible I'm just trying to join the dots..
... View more
06-16-2016
07:35:PM
We have a 2012 R2 Remote Desktop Gateway on our LAN which publishes some applications. I'd like to understand the neatest way to allow users to login to our Pulse PSA web interface (so no direct network connectivity) and pull a dynamic list of the published applications that they are allowed to use from the RD Gateway, and for them to be able to use them. I know I can manually create bookmarks to Published Applications but I'd like to have things so that when Tom logs on he automatically sees the apps he would see on the RD Gateway website same for Dick and for Harry. I did try using the PSA to browse to the RD Gateway URL and it lets me login and see the icons for the published apps, but it doesn't allow me to run any of them, when I click one I get an error on the PSA that says something like the resource could not be found (works fine on the LAN). What I'm trying to avoid here is exposing the RD Gateway directly to the internet or giving untrusted clients direct access to our network. Would anyone have any suggestions please? We're on 8.2r3.
... View more
06-13-2016
05:24:PM
Fantastic thank you, so essentially I can put the Chrome stuff first in one rule or several and only when it goes past those, would it try to apply the role, and the host checker for that rule would kick in? Nice solution :)
... View more
06-09-2016
07:57:AM
We currently mandate Internet Explorer for our PSA. We would like to allow Chrome for the HTML5 functionality. Currently we have a Pulse Secure icon on the HTML portal page once people login. We would like that anyone authorised for HTML5 can login through Chrome but they will not see the Pulse Secure icon. We would like that anyone authorised for VPN Tunnel can login through IE and so long as they pass host checker they see the Pulse Secure icon. What's the simplest way to do this please? We're on 8.2r3
... View more
05-31-2016
07:19:PM
Are either of you aware of any similar chaos going to 8.2 R3 from 8.2 R1 that we had going from 8.1 to 8.2 please? We used Juniper for years and it was seamless but the 8.2 upgrade has left me a bit cautious (I can't reasonably test on a virtual appliance as we wouldn't truly know until clients start hitting it and upgrading etc.) Thanks :)
... View more
05-30-2016
03:07:PM
Thank you, we aren't on 8.3 R3 yet (probably go to that this week) but that sounds like the option if you're saying it will simply mimic/revert the original behaviour? I do like that the new option presents the Duo login page but I can't quite put my finger on it but the user experience just feels a bit broken in that I've had tons of calls from people asking "This doesn't quite seem right, should it be doing that?".
... View more
05-29-2016
09:50:AM
Thanks for clarifying. I guess people have differing opinions but it seems like a backward step IMO. The older Pulse Secure clients where it was integrated just looked more polished. As I type this I can see a big benefit which is the fact it can display the full Duo "push" dialogue rather than having to type in "push" "sms" or whatever it may be, but it still looks a little bit "broken" in how it flows - just a personal view :)
... View more
05-28-2016
10:38:AM
What we're with 8.2 is that when users connect using the Pulse Secure application in the system tray (rather than through the web portal) it used to prompt for username and password as part of the Pulse Secure application so it was seamless. Now it seems when you hit "connect" in the PCS application in the system tray it's opening a web browser to ask you to login, which you do, then once logged in the web page disappears and the Pulse application carries on. We use Duo though I don't think that's anything to do with the issue as this happens before you've logged in so the PSA doesn't know who you are at that point. I haven't opened a case yet, is anyone else seeing this?
... View more
05-28-2016
10:36:AM
It works but it's kind of hit and miss. I use a Macbook and connect using Chrome and then HTML5 RDP to a Windows 8 box and it mostly connects and is fine, but sometimes it randomly disconnects and I have to reconnect Guacamole. The connection to the portal and other internet sites is fine at all times.
... View more
05-28-2016
10:32:AM
What we're also seeing is that prior to 8.2 if users connected using the Pulse Secure application in the system tray (rather than through the web portal) it would prompt for username and password as part of the Pulse Secure application - now it seems when you hit connect in the application it's actually opening a web browser to ask you to login, which you do, then once logged in the web page disappears and the Pulse application carries on. We use Duo though I don't think that's anything to do with the issue as this happens before you've logged in so the PSA doesn't know who you are at that point.
... View more
05-16-2016
03:15:PM
Thanks for the reply, and quite honestly thanks for just being honest rather than the corporate line a lot of companies try to put on these issues :) The "two icons" thing is something that I think is fairly minimal but I have seen it. In many cases doing what you said and just nuking anything in Add/Remove from Juniper or Pulse has been sufficient. Do you have a KB article or just a guide on how to do a total manual removal of any stuff that Add/Remove may not cover please? With the "two icons" machines I've looked at personally there was nothing left in Add/Remove but after a reboot and reinstall, two icons.. :)
... View more
05-15-2016
05:09:PM
We've used our IVE for years with pretty much zero issue between releases. We push the Installer Service via Group Policy and typically when a new release is installed clients may get a "Do you want to run this now/always" but that's it, no admin rights type issues because that's what the Installer Service is meant to deal with. 8.1 to 8.2 has been a disaster. We must have had around 10% of our workforce calling in from offsite because they've been prompted for admin rights or the Pulse Secure Client has simply decided not to upgrade correctly. We have clients who now have two Pulse Secure icons in their System Tray and even removing every last item from Add/Remove Programs that relates to Pulse Secure or Juniper doesn't seem to fix it. I don't know if this is a one-off or indicative of anything deeper but has anyone experienced anything similar? Is there an official guide on how to remove every single last trace of anything Pulse Secure related from a client so we can do a truly clean start? Thanks.
... View more
03-18-2016
07:38:AM
Yes I saw that, but whatever I do, even with FIPS, I get Chrome warn about obsolete ciphers.
... View more
03-16-2016
06:19:PM
As it says :) We're keen on the HTML5 RDP client but I'm always wary of a .1 release of pretty much anything.
... View more
03-16-2016
06:18:PM
We're running a PSA with 8.1 R7. Qualys SSL Scan gives an A- which is good but it falls a little short due to FS being disabled with most browsers. Google Chrome also shows we're using an "obsolete" cipher suite. In the PSA I have everything set to "most secure" so TLS1.2, 168bit, 2048 DHE and I cannot see what more I can physically set?
... View more
01-15-2016
07:51:AM
It's OK we figured it and it's kind of obvious but a little unexpected :) We're testing with the VM appliance so don't yet have AD/LDAP setup. I was logging into the VPN as "Test" and using a bookmark for the html5 connection. It looks like it passes credentials but if they aren't accepted it doesn't fallback or prompt for alternatives it just fails. As soon as I manually coded the credentials in the bookmark it worked - I guess it's a .1 release thing? The html5 RDP is absolutely amazing and will be very interesting to see how it goes - excellent stuff :)
... View more
01-14-2016
11:20:AM
1 Kudo
Thanks and yes I found that but it doesn't seem to work with 2008 server or Windows 8.1 even with network level authentication disabled. I have a case open as the guide doesn't seem to state any limitations (unless I've also missed that :))
... View more
01-13-2016
08:51:PM
In all the Pulse Secure literature I can find about 8.2 it mentions a new HTML5 RDP client that apparently means that you don't need to install a client, or have Java installed and use HOB if you're on OS X. I have the virtual appliance for eval via our reseller (we have an old SA and need to try 8.2 to decide if it's worth replacing the SA earlier than planned). I simply cannot find how I can use the "clientless" RDP as any kind of RDP sessions always seems to want to install the ActiveX client and apps, or launch through Java. Have I completely misunderstood?
... View more
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
